# About PQSS

Source: https://pqss.ca/about
Last modified: 2026-11-11
Description: Who publishes PQSS, the Public QR Security Standard; how it is licensed, versioned and changed; and how to send feedback.

PQSS, the Public QR Security Standard, sets out what an organization that posts QR codes in public places should do to find, remove and report fake codes stuck over its own.

## Publisher

PQSS is written and published by [EZQR](https://ezqr.ca/) (Canada), a Canadian QR code software company. The standard is tool-neutral: it can be met with a spreadsheet and a clipboard, and any tool or process that meets the requirements is equally valid.

## No certification

There is no PQSS certification. No organization, including the publisher, certifies or audits compliance, and nobody may describe themselves as "PQSS certified". Organizations assess themselves with the [self-assessment checklist](https://pqss.ca/self-assessment) and, if every answer is yes, may state: *"We self-assess against PQSS 1.0, the Public QR Security Standard. Last assessed: [date]."*

## Licence and attribution

The text of PQSS is licensed under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/). You may copy, adapt and republish it, including inside your own procedures, as long as you give credit. A suitable attribution:

> Based on PQSS 1.0, the Public QR Security Standard, published by EZQR (Canada), https://pqss.ca/1.0, licensed under CC BY 4.0.

If you adapt the text, say so, and don't present your version as PQSS itself.

## Versions

A minor version (1.1) clarifies wording or adds SHOULD-level guidance. A major version (2.0) changes MUST-level requirements. Every version keeps its own permanent page, and a self-assessment always names the version it used.

| Version | Status | Published |
| --- | --- | --- |
| [PQSS 1.0](https://pqss.ca/1.0) | Published | 2026-11-11 |

## Feedback

Send comments, corrections and proposed changes to [feedback@pqss.ca](mailto:feedback@pqss.ca). Feedback from people who run inspections (parking operators, transit agencies, municipalities, restaurant groups) is especially useful for the inspection periods in Requirement 2.

## Related guidance

- **ITSAP.00.141, *Security considerations for QR codes*** (Canadian Centre for Cyber Security): guidance for people who scan QR codes. PQSS is the counterpart for people who post them.
- **PCI DSS**: card-payment devices are inspected on a schedule for tampering and substitution. PQSS applies the same approach to printed codes. PQSS isn't affiliated with the PCI Security Standards Council.
- **ISO/IEC 18004**: the QR code symbology. PQSS doesn't change how codes are encoded or printed.

---

Site summary for agents: https://pqss.ca/llms.txt - every page in one document: https://pqss.ca/llms-full.txt
Any page is available as Markdown at its own URL with `Accept: text/markdown`, or by appending `.md` to the path.